Multiple vulnerabilities in Microsoft Windows

Description

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Windows Remote Desktop Protocol (RDP) can be exploited remotely to obtain sensitive information.
2. An elevation of privilege vulnerability in Windows Backup Service can be exploited remotely to gain privileges.
3. A spoofing vulnerability in Windows Admin Center can be exploited remotely to spoof user interface.

Original advisories

• CVE-2026-56171

• CVE-2026-58598
• CVE-2026-58643

Exploitation

CVE list

• CVE-2026-58598
  unknown
• CVE-2026-58643
  unknown
• CVE-2026-56171
  unknown

KB list

• 5099539
• 5101649
• 5101650

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com